high7.2
CVE-2026-38751
OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_module…
Impact
OpenSTAManager version 2.10 and earlier contains an arbitrary file upload vulnerability in the module update functionality (modules/aggiornamenti/upload_modules.php)
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | devcode-it/openstamanager | <= 2.10-beta | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Devcode | Openstamanager | through 2.10 |